Prepare for the CompTIA CySA+ exam with interactive quizzes, flashcards, and multiple-choice questions. Each question offers hints and detailed explanations to enhance your learning. Get exam-ready with confidence!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


What is a key feature of GDPR concerning the processing of personal data?

  1. Data minimization

  2. Data encryption is mandatory

  3. Data can be reused without restrictions

  4. Collection of personal data is unrestricted

The correct answer is: Data minimization

A key feature of the General Data Protection Regulation (GDPR) regarding the processing of personal data is data minimization, which stipulates that organizations should only process personal data that is necessary for the specific purposes for which it is collected. This principle aims to limit data collection to the minimum required to achieve a specific, legitimate purpose, ultimately reducing the risks associated with excessive data processing and protecting individuals' privacy. By implementing data minimization, organizations can enhance their compliance with GDPR and mitigate potential data breaches. The other options present misunderstandings of GDPR principles. Data encryption is not mandatory across all processing activities under GDPR, although it is a recommended security measure. The concept that data can be reused without restrictions contradicts the GDPR's requirement for data to be used only according to the original purpose for collection. Lastly, the notion that the collection of personal data is unrestricted directly opposes GDPR, as it sets strict guidelines for obtaining consent and processing data lawfully and transparently.